Kerberos Time Skew – my eyes aren’t deceiving me

27/08/2012

A couple of times while troubleshooting something else I have noticed that Kerberos still works even if the time skew is greater than 300 sec. On other occasions I have definitely seen it fail. As far as I knew this wasn’t supposed to happen, but I never got round to following it up as I was too busy with the original issue (and besides, it’s easy to fix; just set the time service to work properly!). Now finally here is an explanation from the AskDS guys as to why this is: